面向医疗物联网的匿名认证协议  

Anonymous Authentication Protocol for Medical Internet of Things

作　　者：刘英军[1] 罗洋 杨钰均 刘媛妮 LIU Yingjun;LUO Yang;YANG Yujun;LIU Yuanni(Industry Development and Promotion Center,Beijing 100846,China;School of Computer Science and Technology,Chongqing University of Posts and Telecommunications,Chongqing 400065,China;School of Cyber Security and Information Law,Chongqing University of Posts and Telecommunications,Chongqing 400065,China)

机构地区：[1]工业和信息化部产业发展促进中心,北京100846 [2]重庆邮电大学计算机科学与技术学院,重庆400065 [3]重庆邮电大学网络空间安全与信息法学院,重庆400065

出　　处：《计算机科学》2023年第8期359-364,共6页Computer Science

基　　金：重庆市自然科学基金面上项目(cstc2020jcyj-msxmX1021);重庆市教委科学技术研究项目(KJZD-K20200602);网络与交换技术国家重点实验室(北京邮电大学)开放课题资助项目(SKLNST-2021-1-18);重庆市自然科学基金(cstc2020jcyj-msxmX0343)。

摘　　要：随着物联网技术的不断成熟,其开始被频繁地应用于各行各业以提高人们的工作效率和生活水平。物联网在医疗领域的广泛应用,不仅能方便患者获取医疗服务,同时也能让医生更及时、准确地获取患者的身体状况,从而制定更高效的治疗方案。然而,人们在享受医疗物联网便利的同时,如何保证患者的通信安全和个人隐私也是不容忽视的问题。为了实现用户安全访问网络,提出了一个基于同态加密的高效匿名认证与密钥交换协议,医疗设备与远程医疗服务器之间只需要一个低熵的口令就可以实现相互认证,从而协商出一个高熵的会话密钥。在标准模型下证明了方案的安全性,仿真实验结果表明该方案比现有的同类方案具有更高的效率。As IoT technology continues to mature,it has been frequently used in various industries to improve people's work efficiency and living standards.The widespread application of IoT in the medical field facilitates patients'access to medical services while also allowing doctors to obtain more timely and accurate information about the patient's physical condition,so that they can develop more efficient treatment plans.However,while people are enjoying the convenience of medical IoT,how to ensure the communication security and personal privacy of patients are issues that cannot be ignored.In order to realize users'secure access to the network,this paper proposes an efficient anonymous authentication and key exchange protocol based on homomorphic encryption.Medical devices and telemedicine servers only need a low-entropy password for mutual authentication,thus negotiating a high-entropy session key.In this paper,the security of the scheme is proved under the standard model,and the simulation experimental results show that the scheme is more efficient than existing similar schemes.

关 键 词：密码认证 医疗物联网 标准模型 匿名认证 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]